Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[pull] main from pypi:main #2305

Open
wants to merge 931 commits into
base: main
Choose a base branch
from
Open

[pull] main from pypi:main #2305

wants to merge 931 commits into from

Conversation

pull[bot]
Copy link

@pull pull bot commented Feb 24, 2023 •
edited

See Commits and Changes for more details.

Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label Feb 24, 2023
di and others added 29 commits January 11, 2024 20:29
@di
Don't require the nbf claim (#15197)
c391c43
@di @th3coop
OIDC provider active state (#15201)
f83eaf2 
* Add OIDC ActiveStatePublisher modeling

* Update warehouse/oidc/models/github.py

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* Update warehouse/migrations/versions/9a0ed2044b53_add_activestate_oidc_publisher.py

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* Update warehouse/migrations/versions/9a0ed2044b53_add_activestate_oidc_publisher.py

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* Update warehouse/migrations/versions/9a0ed2044b53_add_activestate_oidc_publisher.py

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* Update warehouse/migrations/versions/9a0ed2044b53_add_activestate_oidc_publisher.py

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* Update warehouse/migrations/versions/9a0ed2044b53_add_activestate_oidc_publisher.py

Co-authored-by: Dustin Ingram <di@users.noreply.github.com>

* Review cleanup

* Remove branching in migration graph with ActiveState Model introduction

* Revert mocking change to GitHub tests. Changes focused on that can be done at another time

---------

Co-authored-by: Carey Hoffman <careyh@activestate.com>
Co-authored-by: Carey Hoffman <cgchoffman@gmail.com>
@miketheman @di
chore: remove remaining Basic Authentication stuff (#15196)
bfa609e 
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@dependabot @di
chore(deps): bump jinja2 from 3.1.2 to 3.1.3 (#15188)
e62049b 
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.2...3.1.3)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@di
Fix sub filter for Google OIDC Publisher lookup (#15202)
1c962a4
@di
The _check_sub verifier should check if empty (#15203)
5587c72
@miketheman
refactor: replace permission strings with enums (#15205)
5466d3a
@dependabot
chore(deps): bump gitpython from 3.1.40 to 3.1.41 (#15185)
f17c3b6 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pypi-combine-prs @dependabot
Combined PRs (#15234)
30c8720 
* chore(deps): bump celery-types from 0.20.0 to 0.21.0

Bumps [celery-types](https://github.com/sbdchd/celery-types) from 0.20.0 to 0.21.0.
- [Commits](https://github.com/sbdchd/celery-types/commits)

---
updated-dependencies:
- dependency-name: celery-types
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-setuptools

Bumps [types-setuptools](https://github.com/python/typeshed) from 69.0.0.20240106 to 69.0.0.20240115.
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-setuptools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump mkdocs-material from 9.5.3 to 9.5.4

Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.5.3 to 9.5.4.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.5.3...9.5.4)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump stripe from 7.11.0 to 7.12.0

Bumps [stripe](https://github.com/stripe/stripe-python) from 7.11.0 to 7.12.0.
- [Release notes](https://github.com/stripe/stripe-python/releases)
- [Changelog](https://github.com/stripe/stripe-python/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-python@v7.11.0...v7.12.0)

---
updated-dependencies:
- dependency-name: stripe
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump google-cloud-bigquery from 3.14.1 to 3.16.0

Bumps [google-cloud-bigquery](https://github.com/googleapis/python-bigquery) from 3.14.1 to 3.16.0.
- [Release notes](https://github.com/googleapis/python-bigquery/releases)
- [Changelog](https://github.com/googleapis/python-bigquery/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-bigquery@v3.14.1...v3.16.0)

---
updated-dependencies:
- dependency-name: google-cloud-bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sphinxcontrib-serializinghtml from 1.1.9 to 1.1.10

Bumps [sphinxcontrib-serializinghtml](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml) from 1.1.9 to 1.1.10.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/blob/master/CHANGES)
- [Commits](sphinx-doc/sphinxcontrib-serializinghtml@1.1.9...1.1.10)

---
updated-dependencies:
- dependency-name: sphinxcontrib-serializinghtml
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sphinxcontrib-devhelp from 1.0.5 to 1.0.6

Bumps [sphinxcontrib-devhelp](https://github.com/sphinx-doc/sphinxcontrib-devhelp) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-devhelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-devhelp/blob/1.0.6/CHANGES)
- [Commits](sphinx-doc/sphinxcontrib-devhelp@1.0.5...1.0.6)

---
updated-dependencies:
- dependency-name: sphinxcontrib-devhelp
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump cmarkgfm from 2022.10.27 to 2024.1.14

Bumps [cmarkgfm](https://github.com/theacodes/cmarkgfm) from 2022.10.27 to 2024.1.14.
- [Release notes](https://github.com/theacodes/cmarkgfm/releases)
- [Commits](theacodes/cmarkgfm@2022.10.27...2024.1.14)

---
updated-dependencies:
- dependency-name: cmarkgfm
  dependency-type: indirect
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump mkdocs-rss-plugin from 1.11.0 to 1.12.0

Bumps [mkdocs-rss-plugin](https://github.com/Guts/mkdocs-rss-plugin) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/Guts/mkdocs-rss-plugin/releases)
- [Changelog](https://github.com/Guts/mkdocs-rss-plugin/blob/main/CHANGELOG.md)
- [Commits](Guts/mkdocs-rss-plugin@1.11.0...1.12.0)

---
updated-dependencies:
- dependency-name: mkdocs-rss-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump faker from 22.0.0 to 22.2.0

Bumps [faker](https://github.com/joke2k/faker) from 22.0.0 to 22.2.0.
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v22.0.0...v22.2.0)

---
updated-dependencies:
- dependency-name: faker
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump structlog from 23.3.0 to 24.1.0

Bumps [structlog](https://github.com/hynek/structlog) from 23.3.0 to 24.1.0.
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@23.3.0...24.1.0)

---
updated-dependencies:
- dependency-name: structlog
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sentry-sdk from 1.39.1 to 1.39.2

Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 1.39.1 to 1.39.2.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@1.39.1...1.39.2)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump trove-classifiers from 2023.11.29 to 2024.1.8

Bumps [trove-classifiers](https://github.com/pypa/trove-classifiers) from 2023.11.29 to 2024.1.8.
- [Release notes](https://github.com/pypa/trove-classifiers/releases)
- [Commits](pypa/trove-classifiers@2023.11.29...2024.1.8)

---
updated-dependencies:
- dependency-name: trove-classifiers
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump markdown from 3.5.1 to 3.5.2

Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.5.1 to 3.5.2.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.5.1...3.5.2)

---
updated-dependencies:
- dependency-name: markdown
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump protobuf from 4.25.1 to 4.25.2

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 4.25.1 to 4.25.2.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v4.25.1...v4.25.2)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump google-auth from 2.26.1 to 2.26.2

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.26.1 to 2.26.2.
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-python@v2.26.1...v2.26.2)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump actions/cache from 3 to 4

Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump alabaster from 0.7.15 to 0.7.16

Bumps [alabaster](https://github.com/sphinx-doc/alabaster) from 0.7.15 to 0.7.16.
- [Release notes](https://github.com/sphinx-doc/alabaster/releases)
- [Changelog](https://github.com/sphinx-doc/alabaster/blob/master/docs/changelog.rst)
- [Commits](sphinx-doc/alabaster@0.7.15...0.7.16)

---
updated-dependencies:
- dependency-name: alabaster
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump beautifulsoup4 from 4.12.2 to 4.12.3

Bumps [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) from 4.12.2 to 4.12.3.

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump ddtrace from 2.4.0 to 2.4.1

Bumps [ddtrace](https://github.com/DataDog/dd-trace-py) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: ddtrace
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump datadog from 0.47.0 to 0.48.0

Bumps [datadog](https://github.com/DataDog/datadogpy) from 0.47.0 to 0.48.0.
- [Release notes](https://github.com/DataDog/datadogpy/releases)
- [Changelog](https://github.com/DataDog/datadogpy/blob/master/CHANGELOG.md)
- [Commits](DataDog/datadogpy@v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: datadog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump cbor2 from 5.5.1 to 5.6.0

Bumps [cbor2](https://github.com/agronholm/cbor2) from 5.5.1 to 5.6.0.
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Changelog](https://github.com/agronholm/cbor2/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/cbor2@5.5.1...5.6.0)

---
updated-dependencies:
- dependency-name: cbor2
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
fix: use correct constraint on Observations (#15235)
6c58290
@woodruffw @miketheman
@dependabot @di
Miscellaneous OIDC fixes (from #15207) (#15225)
e3f90af 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
@jquast @miketheman
Fix 404 for "Installing Packages" links (#15221)
ff56698 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@jeanas
Update trusted publishing docs for 2FA enforcement (#15208)
3abab0c
@pypi-combine-prs @dependabot
Combined PRs (#15256)
f8cad43 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
refactor: extract observation kind map (#15257)
41b86d6
@miketheman
feat: migration for User.is_observer (#15238)
d4c5145
@dependabot
chore(deps): bump ddtrace from 2.5.0 to 2.5.1 (#15268)
8f395d8 
Bumps [ddtrace](https://github.com/DataDog/dd-trace-py) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: ddtrace
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@kairoaraujo @ewdurbin
PEP458: Add minimal RSTUF service configuration (#15241)
34dd5ef 
* remove vault container

The vault container was a previous TUF implementation
(TUF initialization #7488)

The new integration with RSTUF does not require this container.

Signed-off-by: Kairo de Araujo <kairo@dearaujo.nl>

* PEP 458: Add RSTUF services in the Warehouse Infra

This commit adds the RSTUF services to the Warehouse infrastructure
for development and sets the minimum required to start RSTUF services.

It adds the RSTUF API, which is used later to integrate into Warehouse
and RSTUF Worker, which is responsible for computing the TUF metadata.

The RSTUF requires the Postgres and Redis.
Postgres stores the rstuf database used for TUF metadata computing.
Redis stores the task message queue between RSTUF API and Worker, task
backend result, and live settings between RSTUF services.

RSTUF shares the same Postgres and Redis in development environment
but has a specific setup to use its own Postgres database and Redis
database ID.

Postgresql URI
`RSTUF_SQL_SERVER=postgresql://postgres@db:5432/rstuf`

Redis DB Broker and Result is id 1
`RSTUF_BROKER_SERVER=redis://redis/1`
`RSTUF_REDIS_SERVER_DB_RESULT=1`

Redis DB for TUF repository settings is 2
`RSTUF_REDIS_SERVER_DB_REPO_SETTINGS=2`

This commit also includes TUF database creation in the Makefile
during the `make initdb`.

Signed-off-by: Kairo de Araujo <kairo@dearaujo.nl>

* remove rstuf-worker unnecessary settings

Remove settings from rstuf-worker in docker-compose.yml

Signed-off-by: Kairo de Araujo <kairo@dearaujo.nl>

* remove vault volume from docker-compose

---------

Signed-off-by: Kairo de Araujo <kairo@dearaujo.nl>
Co-authored-by: Ee Durbin <ewdurbin@gmail.com>
@miketheman
refactor: use specific classes for responses (#15284)
ddd1b35
@miketheman
fix: add project limits setting (#15295)
f78c678
@woodruffw
docs, tests, warehouse: update PPUG links (#15265)
26583b7
@miketheman
fix: add GH unchecked claim (#15296)
01be76a
@facutuesca
Fix dev docs instructions on how to build docs (#15273)
045993e
@dstufft
Record the attached caveats during Macaroon creation (#15242)
240ed31
@dstufft
Increase migration timeout to 60s and handle OIDC caveats (#15297)
4d26285
@dependabot
chore(deps): bump pytz from 2023.3.post1 to 2023.4 (#15293)
bb5251c
@miketheman
feat: working POST API for Project Observations (#15228)
68c1db9
@pypi-combine-prs @dependabot
Combined PRs (#15311)
921e3d1 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@dependabot @miketheman
chore(deps): bump node from 20.10.0-bookworm to 20.11.0-bookworm (#15184
0ad64dc 
)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
di and others added 30 commits May 1, 2024 11:27
@di
Stop sending emails/warnings on PGP signature uploads (#15896)
7c93a28
@pypi-combine-prs @dependabot
Combined PRs (#15907)
fe5303d 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
feat(admin): exclude orphaned malware records (#15908)
188414b
@weblate @edgarrmondragon
@cpprhtn @manojnambyar @touchiep @rffontenelle @trendels @veselatrajkoska @letruxux
Translations update from Hosted Weblate (#15817)
fd49325 
Co-authored-by: Der Marschall <meinkontobasic@outlook.com>
Co-authored-by: Edgar R. M <edgarrm358@gmail.com>
Co-authored-by: Junwon Lee <cpprhtn@naver.com>
Co-authored-by: Manoj Kumar Bavakad <manojnambyar@gmail.com>
Co-authored-by: Pongsathorn Sraouthai <pongsathorns@gmail.com>
Co-authored-by: Rafael Fontenelle <rafaelff@gnome.org>
Co-authored-by: Stanis Trendelenburg <stanis.trendelenburg@gmail.com>
Co-authored-by: Vesela Trajkoska <veselatrajkoska2@gmail.com>
Co-authored-by: gfbdrgng <hnaofegnp@hldrive.com>
Co-authored-by: letruxux <mrgianfranco483@gmail.com>
Co-authored-by: 大王叫我来巡山 <hamburger2048@users.noreply.hosted.weblate.org>
@di
Only show GitHub Statistics header if there are details (#15863)
e2c2d3c
@di
Don't translate Trusted Publisher notification emails (#15916)
9d4e796
@di
Add groups_direct GitLab OIDC claim (#15919)
3214ace
@facutuesca
Fix GitLab Trusted Publishers UI and docs (#15921)
c0f7789 
Change the "workflow file path" field in the UI and in the docs to
"top-level pipeline file path". This is the correct term, since
GitLab OIDC claims only provide the top-level pipeline (usually
`.gitlab-ci.yml`), rather than individual jobs/workflows.

Also change the security model doc, to clarify that PyPI cannot
tell the difference between different .yml files that are included
in `.gitlab-ci.yml`, since it's the latter that is reported in
the claims.
@shenxianpeng
Use grouped version updates for Dependabot (#15920)
8c51e0a 
* Use grouped version updates for dependabot

* Remove actions/combine-prs and its comments

* Fix putting rest of package together
@Guts @miketheman
fix(blog): remove duplicate RSS feed and add JSON feed (#15890)
52aaa2d 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@dependabot
chore(deps): bump jinja2 from 3.1.3 to 3.1.4 (#15930)
128272a 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@miketheman
Revert "Use grouped version updates for Dependabot (#15920)" (#15932)
20d0a8f
@pypi-combine-prs @dependabot
Combined PRs (#15933)
af3c69c 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump the psycopg group with 3 updates (#15934)
825fc19 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pypi-combine-prs @dependabot
Combined PRs (#15940)
b181234 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@pypi-combine-prs @dependabot
Combined PRs (#15948)
053ede4 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@facutuesca
Remove deprecated version property from docker-compose.yml (#15949)
c81fac9
@miketheman
fix: disallow null bytes in name during register (#15951)
15a9a6c
@AshtonWooster
Fix: Included .gitattributes file to fix line endings on Windows devi…
572cd61 
…ces (#15982)
@dependabot @miketheman
chore(deps): bump requests from 2.31.0 to 2.32.3 (#16024)
f325607 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@dstufft
Monotonic journals (#13936)
eabc81d
@dstufft
Lock the journal insertion lock earlier in the process (#16025)
4d077ff
@dstufft
Move maintaing the RowCount into an async task (#16027)
6a55ab5
@simi @miketheman
Update link to Chrome contrast tool at ui-principles.rst. (#15968)
41fc7ce 
Co-authored-by: Mike Fiedler <miketheman@gmail.com>
@miketheman
fix: add hostname to URLs generated in email (#15960)
cfda7f2
@pypi-combine-prs @dependabot
Combined PRs (#16040)
3accdda 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@miketheman
admin: malware refactor and small features (#16047)
750693f
@miketheman
feat(admin): views for per-project malware reports with verdicts (#16061
1d95263 
)
@pypi-combine-prs @dependabot
Combined PRs (#16070)
39b2935 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>
@ewdurbin
upgrade to postgres 16.1 (#16072)
32e4da4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
⤵️ pull
Projects
None yet
Milestone
No milestone